smack: fix bug: unprivileged task can create labels
Summary
| CVE | CVE-2025-68733 |
|---|
| State | PUBLISHED |
|---|
| Assigner | Linux |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2025-12-24 11:16:02 UTC |
|---|
| Updated | 2026-10-13 11:10:00 UTC |
|---|
| Description | In the Linux kernel, the following vulnerability has been resolved:
smack: fix bug: unprivileged task can create labels
If an unprivileged task is allowed to relabel itself
(/smack/relabel-self is not empty),
it can freely create new labels by writing their
names into own /proc/PID/attr/smack/current
This occurs because do_setattr() imports
the provided label in advance,
before checking "relabel-self" list.
This change ensures that the "relabel-self" list
is checked before importing the label. |
|---|
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 c80173233014a360c13fa5cc79d36bfe6e53a8ed git |
Not specified |
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 6b1e45e13546c9ea0b1d99097993ac0aafae90b1 git |
Not specified |
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 4a7a7621619a366712fb9cefcb6e69f956c247ce git |
Not specified |
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 f8fd5491100f920847a3338d5fba22db19c72773 git |
Not specified |
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 ac9fce2efabad37c338aac86fbe100f77a080e59 git |
Not specified |
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 64aa81250171b6bb6803e97ea7a5d73bfa061f6e git |
Not specified |
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 60e8d49989410a7ade60f5dadfcd979c117d05c0 git |
Not specified |
| CNA |
Linux |
Linux |
affected 38416e53936ecf896948fdeffc36b76979117952 c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3 git |
Not specified |
| CNA |
Linux |
Linux |
affected 4.4 |
Not specified |
| CNA |
Linux |
Linux |
unaffected 4.4 semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.10.248 5.10.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 5.15.198 5.15.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.1.160 6.1.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.6.120 6.6.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.12.63 6.12.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.17.13 6.17.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.18.2 6.18.* semver |
Not specified |
| CNA |
Linux |
Linux |
unaffected 6.19 * original_commit_for_fix |
Not specified |
References
| Reference | Source | Link | Tags |
|---|
| git.kernel.org/stable/c/64aa81250171b6bb6803e97ea7a5d73bfa061f6e |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/6b1e45e13546c9ea0b1d99097993ac0aafae90b1 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/f8fd5491100f920847a3338d5fba22db19c72773 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/c80173233014a360c13fa5cc79d36bfe6e53a8ed |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/c147e13ea7fe9f118f8c9ba5e96cbd644b00d6b3 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/ac9fce2efabad37c338aac86fbe100f77a080e59 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/60e8d49989410a7ade60f5dadfcd979c117d05c0 |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| git.kernel.org/stable/c/4a7a7621619a366712fb9cefcb6e69f956c247ce |
416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
git.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.